Unable to pull Schema Preview for an application using SCIM2.0 connector

[jomartolosa]

Which IIQ version are you inquiring about?

Version 8.3

Is this question regarding a custom connector? If so, please share relevant details below.

No, this question is not regarding a custom connector.

Please share any images or screenshots, if relevant.

Share all details related to your problem, including any error messages you may have received.

The test connection for the application was successful but when we try to get the attribute in schema preview for account, group and entitlement we are unable to pull any data as it was blank.
we have the HOST URL, Client ID, Client Secret

[Jarin_James]

Hi @jomartolosa,

Is the server SCIM 2.0 compliant? If not enable the option Non-compliant Server. This will skip SCIM 2.0 validation for each response from this server if the SCIM 2.0 Server is not fully compliant with SCIM 2.0 Specification.

The connector requires the following endpoints with valid response for execution:

• /ServiceProviderConfig
• /ResourceTypes
• /Schemas
• /ResourceTypes/User
• /Schemas/urn:ietf:params:scim:schemas:core:2.0:User

As mentioned in connector documentation:
Connector does not use the response returned from schema, it will populate the core/ extended schema mentioned inSCIM 2.0 Specs. For more information on the list of attributes, see RFC 7643 - System for Cross-domain Identity Management: Core Schema

SCIM connector documentation for your reference: Integrating SailPoint with SCIM 2.0

[jomartolosa]

Hi @Jarin_James,

The we’ve check the check the non-compliant and for the connector endpoint we get valid response.

[Jarin_James]

Hi @jomartolosa ,

Enable the SCIM connector logs and check the logs.

logger.SCIM2Connector.name=openconnector.connector.scim2.SCIM2Connector
logger.SCIM2Connector.level=trace

Please share the logs, if you need us to further look into this

[jomartolosa]

Hi @Jarin_James,

We move from SCIM 2.0 to Web service now by any means do you know how to add it

like this attribute format in sailpoint?

[Jarin_James]

Hi @jomartolosa ,

Is this what you are looking for? Let me know whether this helps.

[jomartolosa]

Already have the but would like to know how can I add this urn:ietf:params:scim:schemas:extension:sap:user-custom-parameters:1.0 I tried this attribute path urn:ietf:params:scim:schemas:extension:sap:user-custom-parameters:1.0[7].value but it’s not showing

schema preview result

[Remold (Remold Krol)]

Since the value you are retrieving is a boolean you will not see this in the preview.

If you really want to see what is being pulled is using the connectorDebug.

The conectorDebug is a command in the IIQ Console and is started from the command line on the server running IIQ.

With connectorDebug "Application Name" iterate you will see the output from the connector after the BuildMap and Customization Rules (and the WebServiceAfterOperationRule).

– Remold

[Jarin_James]

Hi @jomartolosa,

When the key contains dot(.) in json response you can mention that key in this format

['<keywith.dot>]

For your case it should be something like this.

['urn:ietf:params:scim:schemas:extension:sap:user-custom-parameters:1.0']

I haven’t tested this in IIQ, but in JSON Path evaluator it works. Try it out and let me know.